Creating a dynamic report

[gallantalex]

Hi, I just started working with splunk so if I am too vague or confusing let me know. I want to know if it is possible to create a saved report and view it based on the specified value of some field?

For example I have: Project Name: A | Failed Tests: 4 Project Name: B | Failed Tests: 1 Project Name: A | Failed Tests: 3 ... and so on I want a report that will show the trends of the number of tests failed each day for a certain project. I want to be able to save that report. Then when somebody wants to view the trend of failing test for some project, all they have to do is click on that saved report and specify the project that they are interested in.

[Lowell · Accepted solution]

Sounds like the most obvious solution would be to use a form search. I'm not sure if that will give you everything you are looking for, but it seems the best place to start:

You can find the docs here:

http://www.splunk.com/base/Documentation/latest/Developer/DynamicForm